Privacy Policy

Effective Date: September 1, 2026 · Last Updated: September 1, 2026

This Privacy Policy describes how Locli (“we,” “us,” or “our”), operated by Ethan Jones, collects, uses, and protects your personal information when you use our platform and services (the “Service”).

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

When you create an account or use the Service, we may collect:

Account information: Email address, display name, password (encrypted by Supabase Auth)
Profile information: City, state, bio, profile photo, phone number (optional)
Band information: Band name, genre, member count, Spotify links, descriptions, media
Organization information: Organization name, type, venue details, event information
Communications: Messages sent to other users through the platform
Gig listings: Event details, dates, descriptions, and requirements you post

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

Usage data: Pages visited, features used, actions taken on the platform
Device information: Browser type, operating system, device type
Log data: IP address, access times, referring URLs
Cookies: Authentication session cookies managed by Supabase (see Section 5)

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service;
Create and manage your account;
Display your profile to other users of the platform;
Facilitate connections between bands, venues, organizers, and fans;
Send you service-related notifications (e.g., new messages, gig applications, account updates);
Respond to your inquiries and provide support;
Enforce our Terms of Service and protect the safety of our users;
Analyze usage patterns to improve the platform experience;
Detect and prevent fraud, spam, or abuse.

3. How We Share Your Information

3.1 With Other Users

Locli is a platform designed to connect users. The following information is visible to other users based on your profile and activity:

Your display name, city/state, and public profile information;
Band profiles and gig listings you create;
Organization profiles you manage.

Contact information sharing: Your email address and phone number are only shared with other users when a connection is mutually agreed upon through the platform’s connection handoff process (e.g., when both parties agree to connect regarding a gig opportunity). We never share your private contact information without your explicit action.

3.2 With Third-Party Service Providers

We use the following third-party services to operate the platform:

Supabase: Authentication, database, and file storage
Vercel: Website hosting and deployment
Spotify: Music embeds and artist linking (when you provide Spotify links)

These providers only receive information necessary to perform their services and are bound by their own privacy policies.

3.3 We Do NOT

Sell your personal information to third parties;
Share your data with advertisers;
Provide your information to data brokers;
Use your data for purposes unrelated to operating the Service.

3.4 Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal obligations, protect our rights or safety, or protect the safety of our users or the public.

4. Data Storage & Security

4.1 Where Your Data is Stored

Your data is stored on Supabase servers, which run on Amazon Web Services (AWS) infrastructure located in the United States. All data transmission between your device and our servers is encrypted via HTTPS/TLS.

4.2 Security Measures

We implement the following security measures to protect your data:

Password encryption: Passwords are hashed using industry-standard algorithms by Supabase Auth — we never store plaintext passwords;
Row Level Security (RLS): Database-level access controls ensure users can only access data they are authorized to see;
HTTPS encryption: All data in transit is encrypted;
Secure authentication: Session management handled by Supabase Auth with secure, httpOnly cookies;
Access controls: Administrative access to data is limited and protected.

4.3 No Guarantee

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. Cookies

We use cookies strictly for authentication and session management. Specifically:

Authentication cookies: Managed by Supabase Auth to maintain your login session;
Session cookies: Used to remember that you are logged in as you navigate the platform.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. We do not participate in cross-site tracking.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

Account data: Retained until you request account deletion;
Messages: Retained until you delete your account or the conversation;
Usage logs: Retained for up to 90 days for security and debugging purposes;
Deleted content: Removed from active display promptly; may persist in backups for up to 30 days.

7. Your Rights & Choices

You have the following rights regarding your personal information:

Access: You can request a copy of the personal data we hold about you;
Correction: You can update your profile information at any time through the platform;
Deletion: You can request that we delete your account and associated personal data;
Data export: You can request an export of your data in a portable format;
Opt-out of communications: You can unsubscribe from non-essential email notifications.

To exercise any of these rights, please contact us at locli.admin@gmail.com. We will respond to requests within 30 days.

8. Children’s Privacy

Locli is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information promptly.

Users between the ages of 13 and 17 may use the Service with verifiable parental or guardian consent, as described in our Terms of Service.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at locli.admin@gmail.com.

9. Third-Party Links & Services

The Service may contain links to third-party websites or services (such as Spotify artist pages, venue websites, or social media profiles). We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies before providing them with any information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page. We may also notify you via email or through an in-app notice for significant changes.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: locli.admin@gmail.com
Platform: Locli (locli.art)
Operator: Ethan Jones
Location: Knoxville, Tennessee